菜单
这个仓库中的 skills
SkillsMP 已收集 aibot88/sec_skill_store 中的 2,449 个 Skill。打开任一 Skill 可查看来源和详情。
aibot88/sec_skill_store已展示 40 / 2,449 个已收集 Skill。
Solve CTF reverse engineering challenges using systematic analysis to find flags, keys, or passwords. Use for crackmes, binary bombs, key validators, obfuscated code, algorithm recovery, or any challenge requiring program comprehension to extract hidden…
原文语言：英语
Solve CTF (Capture The Flag) challenges by analyzing challenge descriptions, source code, and interacting with challenge environments to capture flags.
原文语言：英语
Coding doctrine for any task that creates, modifies, or refactors code in a programming language. Make sure to consult this skill whenever the user is about to write, edit, debug, or ship code, even if they don't explicitly ask for "best practices" — Claude's…
原文语言：英语
Test-pattern doctrine. Tests are copyable from ~/.claude/patterns/tests/, three categories: input boundary, contract, effect. Make sure to consult this skill whenever code changes touch a boundary where someone else's code meets yours, even if the user…
原文语言：英语
Define semantic layer cubes with Drizzle ORM tables, including dimensions, measures, time dimensions, and security context. Use when creating analytics cubes, defining data models, setting up multi-tenant filtering, or working with drizzle-cube semantic…
原文语言：英语
Cube Sandbox 安全沙箱执行技能。当需要安全执行 Python 代码、Shell 命令，或需要隔离环境运行不受信任的代码时使用。 适用场景： (1) 用户要求"在沙箱中执行代码"、"跑一段 Python"、"安全执行"、"隔离环境运行"； (2) 需要执行可能有副作用的代码（文件操作、网络请求、安装包等），希望通过沙箱隔离风险； (3) 需要读写沙箱内文件、挂载宿主机目录到沙箱； (4) 需要控制沙箱网络策略（完全断网、白名单、黑名单）； (5) 需要暂停/恢复沙箱（保留内存快照以实现快速复用）。…
Author high-quality assessment items (questions, prompts, tasks) aligned to learning objectives with answer keys and rubrics. Use when creating test questions, writing assessment items, or building item banks. Activates on "write assessment items", "create…
原文语言：英语
Validate WCAG 2.1 compliance, screen reader compatibility, and Universal Design for Learning (UDL) principles implementation throughout curriculum materials. Use when checking accessibility, validating UDL, or ensuring compliance. Activates on "accessibility…
原文语言：英语
Generate a full practice exam (e.g. 60 questions) for an ExamNova exam by first scraping the vendor's latest official exam objectives via Firecrawl, then prompting Claude to author questions whose domain distribution matches the published blueprint…
原文语言：英语
Customs & Trade Compliance workflow skill. Use this skill when the user needs Codified expertise for customs documentation, tariff classification, duty optimisation, restricted party screening, and regulatory compliance across multiple jurisdictions and the…
原文语言：英语
Brazilian healthcare compliance for regulated medical and psychological content. Includes LGPD data protection, CFM/CRP/ANVISA regulatory requirements, scientific research validation, and data sanitization. Use when developing healthcare applications,…
原文语言：英语
Research CVEs and security advisories for project dependencies. Uses Exa, NVD API, OSV.dev, and GitHub Advisory Database to find known vulnerabilities.
原文语言：英语
Scan project dependencies for known CVEs using native audit tools (npm, pip, composer, cargo, go, bundler, dart)
原文语言：英语
Look up CVE vulnerability details by ID via MITRE CVE API with NVD fallback — severity, CVSS score, affected products, and references
原文语言：英语
Run deterministic CWE Top 25 checks (Semgrep + custom rules) before and after edits to enforce Constitution principle 7 at G2 Validate. Activate on file edits at risk moderate or high.
原文语言：英语
UK NCSC Cyber Essentials Plus (CE+) v3.3 Danzell expert. Reference-depth framework plugin with assessment, scope determination, and evidence checklist — backed by the SCF crosswalk. Five core controls: Firewalls, Secure Configuration, User Access Control (MFA…
原文语言：英语
Strukturierte Sofortmassnahmen bei aktivem Cyber-Vorfall — Hacker-Angriff Ransomware Datenexfiltration Insider-Threat. Phase 1 Sofort-Eindaemmung Netztrennung Forensik-Sicherung. Phase 2 DSGVO-Meldung Art. 33 72 Stunden bei Risiko Betroffenen-Information Art.…
原文语言：德语
Esperto di sicurezza informatica per proteggere codice, infrastruttura e dati sensibili. Attiva questa skill SEMPRE prima di operazioni che coinvolgono secrets, credenziali, o esposizione pubblica.
原文语言：意大利语
Perform an advanced offensive security audit and attack simulation on the current features.
原文语言：英语
This skill should be used when the user asks to "run daily news", "publish today's news", "draft today's vatt-ghern roundup", "do the daily-news routine", invokes `/vatt-ghern:daily-news`, or asks Claude to author tech-news posts for the vatt-ghern blog. The…
原文语言：英语
Comprehensive code review and troubleshooting for Flutter Android apps written in Dart. Identifies Dart language issues, security vulnerabilities, bugs (visible AND silent), performance issues, and architectural violations. Use for: (1) Pre-commit reviews,…
原文语言：英语
Complete guide for using drift database library in Dart applications (CLI, server-side, non-Flutter). Use when building Dart apps that need local SQLite database storage or PostgreSQL connection with type-safe queries, reactive streams, migrations, and…
原文语言：英语
Dart/Flutter coding rules from ai-toolkit: coding-style, frameworks, patterns, security, testing. Triggers: .dart, pubspec.yaml, Flutter, Riverpod, Bloc, widget, StatelessWidget, StatefulWidget. Load when writing, reviewing, or editing Dart/Flutter code.
原文语言：英语
Proper authentication patterns for dashboard frontend API calls. Use when adding new API endpoints, creating components that fetch data, or debugging 401 Unauthorized errors. Covers JWT token handling, the apiRequest helper, and common pitfalls.
原文语言：英语
Review or assess a data architecture, data model, or data platform design. Evaluates six data-specific quality attributes (DAMA-DMBOK aligned), topology choice, data contracts, GDPR/AI Act compliance, governance gaps, and data mesh readiness. TOGAF Phase C…
原文语言：英语
Implement strong encryption using AES, RSA, TLS, and proper key management. Use when securing data at rest, in transit, or implementing end-to-end encryption.
原文语言：英语
Import Synnovator platform data from .synnovator/*.md files into SQLite database via SQLAlchemy models. Use when need to populate test data, initialize database from file-based data, or migrate .synnovator content to relational database. Triggers include…
原文语言：英语
Metabase REST API automation and troubleshooting: authenticate (API key preferred, session fallback), export/upsert questions (cards) and dashboards, standardize visualization_settings, and run/export results.
原文语言：英语
Conception de dashboards Power BI — DAX, modèle de données, visualisations avancées et Row-Level Security. Se déclenche avec "Power BI", "DAX", "dashboard Power BI", "rapport Power BI", "modèle de données Power BI".
原文语言：法语
Draft and fill data privacy agreement templates — DPA, data processing agreement, GDPR, HIPAA BAA, business associate agreement, AI addendum. Produces signable DOCX files from Common Paper standard forms. Use when user says "DPA," "data processing agreement,"…
原文语言：英语
Specialista di protezione dati italiana ed europea — analizza GDPR, D.Lgs. 196/2003 (Codice Privacy come modificato dal D.Lgs. 101/2018), linee guida del Garante, e conduce DPIA e valutazioni d'impatto trasferimenti. Attivazione quando: l'utente chiede di…
原文语言：意大利语
When the user wants to configure, validate, or troubleshoot DataForSEO or another SEO data provider securely. Also use when provider credentials are missing before keyword, SERP, or SEO analysis work.
原文语言：英语
Ensure Alpaca API is used for quality data, not yfinance fallback. Trigger when: (1) crypto volume filter fails unexpectedly, (2) zero-volume bars in data, (3) API key configuration issues.
原文语言：英语
Production-grade SQL optimization for OLTP systems: EXPLAIN/plan analysis, balanced indexing, schema and query design, migrations, backup/recovery, HA, security, and safe performance tuning across PostgreSQL, MySQL, SQL Server, Oracle, SQLite.
原文语言：英语
Foundation patterns for all Databricks SDK skills -- auth, client init, retry, error handling. Referenced by other skills, not used standalone.
原文语言：英语
Troubleshoot Datadog API authentication issues (401/403 errors), understand API keys vs app keys, and configure correct regions. Use when hitting auth errors or setting up Datadog API access.
原文语言：英语
Database performance and safety audit. 70+ checks across 13 dimensions (DB1-DB13): query patterns, indexes, schema design, connections, transactions, migrations, caching, query optimization, ORM anti-patterns, observability, data lifecycle, DB security, and…
原文语言：英语
Используй когда база 1С нужна для workspace init, dump, build, launch или update, а логин/пароль отсутствуют, неизвестны, не проходят или вывод команды похож на проблему лицензии
原文语言：俄语
Execute SELECT queries on 30+ databases (SQLite, SQL Server, MySQL, PostgreSQL, Oracle, etc.) using DbCli. Returns data in JSON, table, or CSV format. Use when user needs to query databases, read data, or execute SELECT statements.
原文语言：英语
Destructive Command Guard. Installs a pre-tool-use hook that blocks unrecoverable shell commands (rm -rf /, git reset --hard, git clean -fd, rm of .env / credentials, force-pushing to main, fork bombs, shred / dd, etc.) before the agent executes them. Use…
原文语言：英语